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Abstract 

There are many situations in which mis-coordinated strategic voting can 
leave strategic voters worse off than they would have been had they not tried 
to strategize. We analyse the simplest of such scenarios, in which the set of 
strategic voters all have the same sincere preferences and all cast the same 
strategic vote, while all other voters vote sincerely. Most mis-coordinations 
in this framework can be classified as instances of either strategic overshoot- 
ing (too many voted strategically) or strategic undershooting (too few). If 
mis-coordination can result in strategic voters ending up worse off than they 
would have been had they all just voted sincerely, we call the relevant strate- 
gic vote unsafe. We show that under every onto and non-dictatorial social 
choice rule there exist circumstances where a voter has an incentive to cast a 
safe strategic vote. We extend the Gibbard-Satterthwaite Theorem by prov- 
ing that every onto and non-dictatorial social choice rule can be individually 
manipulated by a voter casting a safe strategic vote. 

Keywords: Social choice function, strategic voting, Gibbard-Satterthwaite 
theorem, manipulation, safe strategic vote. 
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1. Introduction 



1.1. Overview 

In this paper we consider strategic behaviour of voters when one candi- 
date must be chosen from a set of candidates and voters' preferences with re- 
spect to those candidates are expressed as strict linear orders. The Gibbard- 
Satterthwaite Theorem (GST) — arguably one of the most important the- 
oretical results in this direction to date — states that under any onto and 
non-dictatorial social choice rule there exists a situation where a voter can 
do better by casting a strategic vote rather than the sincere one, provided 
everyone else votes sincerely. In short, every onto and non-dictatorial social 
choice rule is individually manipulable. If only one voter can manipulate the 
election, and she is rational, then she will do this unless having some moral 
objections towards manipulation. However, it may happen that two voters 
with differing preferences each can manipulate the same election. In this 
case the result is much less predictable. We illustrate this by the following 
example 

Example 1. Suppose four people are to choose between three alternatives. 
Let the profile of sincere preferences be 
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and the rule used be Plurality with breaking ties in accord with the order 
a > b > c. If everybody votes sincerely, then c is elected. Voters 1 and 2 
are Gibbard-Satterthwaite manipulators. Voters 3 and 4 are expected to vote 
sincerely. Voter 1 can make b to win by voting b > a > c and voter 2 can 
make a to win by voting a > b > c. However, if they both try to manipulate, 
c will remain the winner. Each of them would prefer that the other one 
manipulates. 

In general, the situation when voters of different types interact strate- 
gically is too complex to analyse. Going from the Gibbard-Satterthwaite 
framework, when only one voter can be strategic to the framework where 
all voters may be strategic is too big a jump. In this paper we analyse an 
intermediate framework, namely the case when only voters of one particular 
type may be strategic. Let us see why this framework is interesting. 
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If voting is anonymous and one voter can individually manipulate, so can 
every other voter present with the same preferences. And in a large profile 
there will be many such voters. But it is not in general true that if multi- 
ple like-minded voters simultaneously attempt exactly the same individual 
manipulation, the outcome will necessarily be (from their perspective) a suc- 
cess. To manipulate successfully the strategically-inclined voter may need 
to coordinate (intentionally or accidentally) with other voters with whom 
she shares the same preferences and, hence, the same incentives. Here is an 
example when such coordination is needed. 

Example 2. Suppose four people are to choose between three alternatives. 
Let the profile of sincere preferences be 
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and the rule used be Borda with breaking ties in accord with the order a > b > 
c. If everybody votes sincerely, then b is elected. Voters 1 and 2 are Gibbard- 
Satterthwaite manipulators. Voter 1 can make a to win by voting a > c > b 
and voter 2 can do the same. However, if they both try to manipulate, their 
worst alternative c will become the winner. 

We note that in the second example it is easier for the two would-be 
manipulators to coordinate since they have the same type, i.e., have identical 
sincere preferences, and hence no conflict of interest. The conclusion that we 
make from consideration of these two examples is: when a group of voters 
involves voters of different types then, for them, manipulation is not purely 
coordination problem, negotiation may be also required. This is why in this 
paper we will consider only homogeneous groups of voters, that is voters with 
identical preferences. 

As in the Gibbard-Satterthwaite farmework we assume that voters have 
complete information about voters' sincere preferences and beliefs about their 
voting intentions. To extend the Gibbard-Satterthwaite theorem we must 
consider the case when several voters of the same type are all pivotal and 
can change the result to their advantage by casting the same strategic vot<0 



This will be for example the case if the voting rule is anonymous. 
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believing that all voters of other types will vote sincerely. In such situation 
any of those would-be manipulators may find it unsafe to act on such incen- 
tive. Indeed, it may happen that if too many or too few of them act on the 
same incentive the result may be worse than the outcome when everyone is 
sincere. This is exactly the situation in Example |2j An alternative to this 
may be a situation when one or more of those would-be manipulators will 
not be worse of no matter how other voters of her type will vote; in such 
case we say that she can cast a safe strategic vote. Of course, the term 'safe' 
refers only to situations when voters of all other types vote sincerely. The 
question that arises is whether or not under any non dictatorial voting rule 
there exist situations when a voter can manipulate and do it safely. In this 
paper we will answer this question in the affirmative. 

The main result of this paper, just formulated, is about pivotal voters, 
however, most of the paper we will work with voters who are not pivotal. Our 
starting point will be the concept of an incentive to vote strategically. We 
will say that a voter has an incentive to vote strategically if she can become 
part of a group of voters of her type who all would benefit if every group 
member casts the same strategic vote. The rational for this definition is that 
strategic voters despite not being pivotal vote strategically because they hope 
or expect that they will be joined by the 'right' set of like-minded voters also 
casting strategic votes, and a more favourable outcome will be brought about 
by their collective effort. For example, at the 2000 US Presidential election, 
a voter who preferred Nader to Gore and Gore to Bush, and felt assured that 
Nader would not win, would have an incentive to strategically vote Gore. 
This incentive would have been shared by every voter of this particular type 
but not felt by any voter of another type. 

As in the case of pivotal voters, we can distinguish between safe and un- 
safe strategic votes. In some situations, all like-minded voters in an election 
all share an incentive to vote strategically but mis-coordination can occur: 
if the group splits up into those who act on the incentive and those who do 
not in the 'wrong' way, the social choice outcome can, from their perspective, 
deteriorate rather than improve. In such cases we say the strategic vote in 
question is unsafe. The most recognisable unsafe strategic votes are those 
that can lead to strategic overshooting or strategic undershooting. Strategic 
overshooting occurs when 'too many' like-minded voters simultaneously act 
on a common incentive to vote strategically, and strategic undershooting oc- 
curs when 'too few' do. When voting is not anonymous, a strategic vote can 
be unsafe even though neither over- nor undershooting are possible. In the 
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example of the 2000 US Presidential election the strategic vote by the Nader 
voters for Gore would have been safe. Despite of this, the number of voters 
having this incentive and acting on it was insufficient to bring about Gore's 
presidencjU. 

It is worthwhile to note that in this framework a sincere vote can be 
strategic. Indeed a strategically inclined voter may decide that there is al- 
ready sufficiently many voters who will cast a strategic vote so she may end 
up submitting her sincere vote after weighing all pros and cons. 

Consideration of the difference between a safe and an unsafe strategic 
vote reveals an additional reason why a voter might not act on a known to 
her incentive to vote strategically: without the ability to coordinate with 
their like-minded fellows, the strategic voter may face the risk of making 
matters worse rather than better. This adds to the list of impediments to 
strategic voting identified elsewh ere, which includes ( i) the inability to ac- 
quire the necessary information ( Chopra et al. . 20041). Hi) the inabi l ity to 



process the large am ount of information one has (IBartholdi HI et al.l . [1989; 



Conitzer et al. 



2007), 



H i) the possibility of provoking an unfavourable re- 
sponse ( Pattanaik . 1976a g Barbera L 1980 ). and (iv) lack of familiarity with 
the electoral context ( Crisp et al. , 20121 ). 

The first main result of this paper will be Theorem [2] that states that un- 
der any onto and non-dictatorial social choice rule there can arise a scenario 
where a voter has an incentive to cast a safe strategic vote. Our second main 
result — which extends the Gibbard-Satterthwaite theorem — states that un- 
der any onto and non-dictatorial social choice rule there will exist a situation 
where a certain pivotal voter can manipulate safely. This can be deduced 
from Theorem [2] rather straightforwardly. 

This paper is organised as follows. In Section [TT21 we discuss the literature 
related to this article. Section [2] gives our formal definitions and states our 
results. Our Section [3] will be entirely devoted to examples of safe and unsafe 
strategic votes and their graphical illustration. The main theorems are proven 
in Sections 0] - [6j Section [7] concludes with the discission of the results 
obtained and formulates some open questions. 

This paper is a refinement of our preprints flSlinko and White! l2008aH bh. 



2 In the crucial state Florid a Bush got only 537 more votes than Gore while 97,488 
voters voted Nader |FEC] (|200ll ). 



5 



1.2. Related literature 

There are three strands in the literature related to this work: coalitional 
manipulability of single-winner social choice rules, manipulability of multi- 
winner social choice rules and informational asp ects of manipulab i lity. 



An election is called co alitionally manipulable iMurakamil (ll968[ ) ; iPattanaik 



(119731 ) ; IChamberhnl (119851 ) if a group of voters may change their votes in such 
a way that the result of the election becomes more desirable for them. It is 
also assumed that the voters outside the coalition are not strategic and vote 
sincerely. 

The central concept for this strand of lit erature is th e conc ept of the 
average size of minimal manipulating coalition IChamberlinl (119851). This pa - 



rameter is used to compare the 'quality' of voting rules 



Prit chard and Slinkol (120061 ) ; iPritchard and Wilson! (120091 ) . It has been shown 



Chamberlinl (119851 ): 



that, if voters are assumed to be independent and the size of the coalition 
grows slower than ^/n, where n is the number of voters, then the probability 
that a random election is manipulable by the coalition of this size goes to 
zero as the number of voters goes to infinity, whereas if the number of ma- 
nipulators grows faster than yjn, th en the probab i lity that a random profil e 
is manipulab l e goes to one (see, e.g. , ISlinkol (120041 ) ; IXia and Conitzerl ( 120081 ) ; 
Mossel et all (12012^ . If, on the other hand, the voters are not independent, 



say under the condition that all voting situations are equiprobable, t hen the 
averag e size of the minimal manipulating coalition may have order n (jSlinko 

The early literature on threats and counter-threats should be mentioned 
here although it is not on c oalitional manipula bi lity but r ather on coali- 



tional contr-manipulability. (jPattanaikl . ll976aU bl; iBarberal . Il980l ) assessed 



how coalitions (which could potentially be made up of any number of dif- 
ferent voter-types) could respond to threats by individuals to manipulate; it 
may be interesting to look at situations in which one voter-type threatens to 
manipulate and another type then issues a counter-threat. 

The main drawback of the concepts of coalitional manipulability and 
contr-manipulability is that they assume that coalitions can somehow be 
formed without specifying the mechanism. Those voters must find each other, 
agree to form a coalition, calculate possible manipulations, negotiate which 
one to implement. Negotiation may however be difficult, say in our Example 
coalition consisting of voter 1 and voter 2 can manipulate the election, how- 
ever, there is no obvious way for them to decide which course of action to 
take. This model, however, makes sense when there is an external actor, say 
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a briber, who directs the voters she bribed. In contrast our voters assumed 
to be independent and have to take their own decisions which makes them 
players in a voting manipulation game. We also assume that only voters with 
identical preferences may try to a certain extent to coordinate their actions. 

The main idea of overshooting came to authors observing the behaviour of 
voters during 2005 general election in New Zealand conducte d under the sys- 
tem of proportional representation ISlinko and White! (120101 ) . There we gave 
examples of how safe and unsafe strategic votes could arise in that frame- 
work. To the best of our knowledge, the distinction between safe and unsafe 
strategic votes, and the concepts of strategic over/undershooting, were first 
introduced (in the c ontext of strategic voting under proportional representa- 
tion) in this paper. iParikh and Pacuitl (120051 ) also used the expression 'safe 
vote ', but t o mea n a v ote that is strategically superior to an abstention. 



Battol (120081 ) and lEfy and Baligal (120121 ) have described multi-winner 



elections in which strategic desertion of leading candidates appears to have 
gone too far, and strategic voters have overshot. 

There is an important relationship between the quality and quantity of 
information a voter has, and can receive and send via their communication 
networks, and a voter's abili t y to i dentify and respond to incentives to vote 



strategically. IChopra et al.l ( 120041 ) made clear the importance of the rela- 
tionship. They stressed that the Gibbard-Satterthwaite theorem becomes 
'effective' only when voters a r e able to acquire a certain amount of informa- 
tion. Although IChopra et al.l ( 120041 ) mad e this point particularly thoroughly , 
the basic idea goes back much further - iDummett and Farquharsonl (Il96ll ). 
for instance, wrote that "[t]he only hypothesis which would make the assump- 
tion of uniformly sincere voting plausible would be the absurdly restrictive 
one that no voter had any knowledge, before or during the voting, of the 
preference scales of others" . 

In response to our preprint s, certain follow-on resea rch h as already be 



gun. O n the issue of complexity, lHazon and Elkindl (120101 ) and llanovski et al. 



(120 111 ) presented polynomial time algorit hms for finding a safe strate gic vote 
under particular social choice rules. And IWilson and Reyhanil ( 120101 ) looked 
into the asymptotic probability of a safe manipulation existing for a given 
scoring rule. 
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2. The model and the results 



We consider the situation where a finite set of voters [n] = {1,2, ... ,n} are 
to choose a single alternative from a finite set of alternatives A. Throughout 
the paper it will be assumed that |^4| > 3 and we will denote the alternatives 
A, B,C, . . .. Voters have preferences over alternatives represented by strict 
linear orders on A. Voters whose preferences are identical will be referred 
to as being of the same type. When \A\ = 3, a voter who prefers X to Y 
and Y to Z, where {X,Y,Z} = {A, B,C}, will be referred to as an XYZ 
type; analogous language will be used when > 3. A profile is a sequence 
of linear orders specifying one preference order for each voter. A profile 
will often be represented as an n-tuple R = (R\, . . . ,R n ); further we will 
introduce an alternative notation. 

Given a set of alternatives A and a set of voters [n] , a social choice rule F 
is a mapping from the set of all possible profiles to A. Voter i is the dictator 
of F if they would not desire to change the value of F at any profile or, 
which is the same, F always selects the most preferred alternative of voter 
i. A social choice rule F is anonymous if it does not pay attention to voters' 
labels, i.e., if tc is a permutationn of (1,2, ... ,n), then 

F(Ri, . . ., R n ) = F(R 7T ( 1 ), . . . , Rn( n ))- 

Let R be a profile, V C [n] a set of voters of the same type, and L a 
preference order over A other than the one representing the preferences of 
the voters in V. Then R_y(L) shall denote the profile obtained from R by 
replacing, for every i 6 V, linear order Ri with L, ceteris paribus. i?_y(X) 
can be read informally as "the profile R, except that the preferences of all 
the voters in V have been switched to L" . If X, Y e A and V C [n] then 
X >~v Y [X >zv V) will denote that every voter in V ranks X above (no 
lower than) Y. 

We are now ready to formulate 

Theorem 1 (Gibbard-Satterthwaite). Suppose an onto, nondictatorial so- 
cial choice rule F is employed to choose one of at least three alternatives. 
Then there exists a profile R, a linear order L, and a voter i, such that 
F(fl_ w (L)) F(R). 



Proofs can be found in the original papers iGibbardl (119731 ) and ISatterthwaite 



(j!975h 
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For the next four definitions we fix a set of voters [n], a set of alternatives 
A, and a social choice rule F. 

Definition 1 (An incentive to vote strategically). Let R be a profile, i be a 
voter, and V be the set of all voters with preferences identical to those of i 
at R. If there exists a linear order L ^ Ri and a subset V\ C V containing i 
such that 

F(R_ Vl (L)) y v F(R) 
then we will say that, at R, voter i has an incentive to vote strategically. 

A voter with an incentive to vote strategically cannot necessarily change 
the social choice by themselves. They may, however, hope that if they do 
cast the strategic vote, they will be joined in that act by the 'right' set of 
like-minded fellow voters. In some circumstances, if the 'wrong' set of like- 
minded voters act on a shared incentive they can inadvertently make the 
outcome worse rather than better (from their perspective, of course). In 
such circumstances we call the strategic vote in question unsafe. 

Definition 2 (Unsafe strategic vote). Suppose that at the profile R, voter i 
has an incentive to strategically vote L ^ Ri. Define V C [n] to be the set of 
all voters with preferences identical to those of % at R. The strategic vote L 
is unsafe for voter i if there exists V2 C V such that i e V2, all the voters in 
V2 have an incentive to strategically vote L, but F(R) >~v F(R-y 2 (L)). 

A strategic vote that is not unsafe will be referred to as safe. During our 
examples and proofs we will refer to a particular kind of safe manipulation 
as an escape. Let R be a profile, and suppose F maps R to (say) A. Let 
L be one particular order that has A last, and let V be the entire set of all 
voters who at R are of type L. If any voter in V has an incentive to vote 
strategically then voters in V will be said to be able to escape at (or from) 
R. 

The most readily identifiable unsafe strategic votes arise when it is possi- 
ble to get a result worse than the status quo when either 'too many' or 'too 
few' voters of a particular type act on a shared incentive to vote strategically. 

Definition 3 (Strategic overshooting). Let R be a profile, i a voter, and L 
a linear order over A other than Ri. Define V to be the set of all voters 
with preferences identical to those of i at R. If we can find two subsets 
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^2 £ V\ ofV, both containing i, such that every voter in V 2 has an incentive 
to strategically vote L but 

F(R_ Vl (L)) y v F(R) y v F(R_ V2 (L)), 

then we say that at R voter i can strategically overshoot by voting L. 

Strategic overshooting occurs when too many voters act strategically. Strate- 
gic undershooting occurs when too few do. More generally, strategic under- 
shooting occurs when the inclusion relation between V\ and V2 is reversed. 

Definition 4 (Strategic undershooting). Let R be a profile, i be a voter, 
and L be a linear order over A other than Ri. Define V to be the set of all 
voters with preferences identical to those of i at R. If we can find two subsets 
V2 C Vi ofV, both containing i, such that every voter in V% has an incentive 
to strategically vote L but 

F(R„ Vl (L)) y v F(R) y v F(R_ V2 (L)), 

then at R voter i can strategically undershoot by voting L. 

Under anonymous social choice rules, unsafe strategic votes arise when 
and only when strategic voters face the prospect of over- or undershooting. 
Under non-anonymous social choice rules it is not necessarily the case that 
voters with an incentive to cast an unsafe strategic vote can strategically 
over- or undershoot. Since such rules are exotic we omit this example. 

The distinction between safe and unsafe strategic votes leads naturally to 
the idea of a choice rule being safely manipulable. 

Definition 5 (Safe manipulability) . A social choice rule is safely manipulable 
if, under it, a voter can have an incentive to cast a safe strategic vote. 

The concepts we have formally defined enable us to broaden the Gibbard- 
Satterthwaite framework in the direction sought. In Section [3] we demon- 
strate that our concepts are merited precisely because the situations to which 
they apply are not unusual. In the subsequent sections we will prove the fol- 
lowing theorem. 

Theorem 2. Every onto and non- dictatorial social choice rule facing at least 
three alternatives is safely manipulable. 
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The proof of Theorem [2] invokes the Gibbard-Satterthwaite Theorem, but 
it is not a straightforward extension. This theorem implies our main result 
which extends the Gibbard-Satterthwaite theorem. 

Theorem 3. Suppose an onto, nondictatorial social choice rule F is em- 
ployed to choose one of at least three alternatives. Then there exists a profile 
R, a linear order L, and a voter i, such that F(R-^y(L)) >~{i} F(R), and L 
is a safe strategic vote for i. 

3. Geometry of overshooting. Further examples 

In this section we aim to achieve the following. Firstly, we give a geomet- 
ric interpretation of safe and unsafe manipulation (overshooting) for scoring 
rules. Then we give an example of undershooting. It is a bit more trickier 
to construct than examples of overshooting and we need at least four alter- 
natives for this. Finally we will present a profile which is unsafely but not 
safely manipulable. 

Example 3 (The Borda rule; safe and unsafe manipulations). Suppose 94 
voters are choosing one of A, B, orC. Let the table below give the distribution 
of sincere preferences. 

Preference order ABC ACB BAC BCA CAB CBA 
Number of voters 17 15 18 16 14 14 

If all voters are sincere then A will score 96, B 99, and C 87, and B would 
win. If between four and eight ABC types vote ACB, ceteris paribus, A would 
win. If 10 or more ABC types vote ACB, ceteris paribus, C would win. So 
the profile of sincere preferences is prone to unsafe strategic voting. We can 
express these outcomes using the terminology introduced in Definition 2. Let 
R denote the profile of sincere preferences, V the set of 17 ABC types, and 
let V\ C Vi C V be such that 4 < |Vi| < 8 and 10 < |T^|. Then (compare 
Definition 2) every voter in Vi has an incentive to strategically vote ACB , 
and 

F(R_ Vl (ACB)) y v F(R) y v F {R_ V2 {AC B)) . 

The profile of sincere preferences is also prone to safe strategic voting (by 
voters of a different type): if 13 or more ACB voters vote CAB, ceteris 
paribus, then C ( rather than their least favorite B ) will win. 



11 



We will build on the ideas of ISaaril ( 119941 ) to illustrate this example ge- 
ometrically. Firstly, we normalise the Borda scores of A, B, C so that the 
sum of normalised scores is 1. Let scn(X) denote the normalised score of 
alternative X. Consider the three-dimensional simplex S 2 with vertices la- 
beled A, B, C . A ballot outcome can be represented by the point x of S 2 for 
which x\ = scn(A), x 2 = scn(B) and x 3 = scn(C), and where x±, x 2 , and 
x 3 are the lengths of perpendiculars dropped from x onto BC, AC, and AB, 
respectively (i.e., xi,x 2 ,xs are the barycentric coordinates of x): 




Figure 1: Scores as homogeneous barycentric coordinates 



The points of S 2 realisable as vectors of normalised Borda scores must lie 
within the region shaded in Figure 2 (below). That shaded region is divided 
into three pentagons. Whenever the vector of normalised scores falls into the 
pentagon closest to the vertice labelled Y, alternative Y wins. 



C 




A B 
Figure 2: Unsafe and safe manipulations 
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We return to Example [3J The vector of scores arising from the profile of 
sincere preferences is represented in Figure 2 by the point x. That point 
lies in the pentagon in which B wins. If some ABC types vote ACB then 
they move the outcome northwest, parallel to BC (the score of A remains 
unchanged), and into the region where A wins. If too many ABC types 
vote ACB, the outcome moves all the way into the region where C wins. If, 
instead, all the ABC types report their sincere preferences while some ACB 
types vote CAB then the outcome moves northeast from x, parallel to AC 
(the score of B is unchanged), and, possibly, into the region where C is the 
winning alternative. 

To construct an example of strategic undershooting under a social choice 
rule, we need to have at least four alternatives present. 

Example 4 (The Borda rule; strategic undershooting). Suppose 41 voters 
are using the Borda rule to select one of five alternatives. Let sincere prefer- 
ences be distributed as follows. 

Preference order ABCDE CEBAD EBCAD ED ACB 
Number of voters 10 15 14 2 

When all voters state their sincere preferences, A scores 59, B 102, C 110, D 
30, and E 109; C wins. If between two and six ABCDE types vote BADCE, 
ceteris paribus, then E wins. If eight or more ABCDE types vote BADCE, 
ceteris paribus, then B wins. 

Example 5 (Anti-plurality/2-approval; a profile that is unsafely but not 
safely manipulable) . Let the distribution of sincere preferences over the three 
alternatives on offer be as follows. 

Preference order ABC ACB BAG BC A CAB CBA 
Number of voters 8^15^5 

If none of the 33 voters are strategic then A scores 23, B 25, and C 18, and 
B wins. At the profile of sincere preferences, only voters of type ABC have 
an incentive to vote strategically. If either 3 or 4 of them vote ACB, ceteris 
paribus, then A will win. If 6 or more of them vote ACB, ceteris paribus, C 
will win. 
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4. Proof of Theorem the road map and the building blocks 

The proof of Theorem [2] is split over three sections, so a road map may be 
helpful. Here in Section H] we collect technical statements that will be used 
frequently later on. In Section we prove Theorem [2] for the case of three 
alternatives. In Lemma [1] we deal first with the case of two voters, then the 
general case will be dealt with in Lemma [3j Section [6] looks at the situation 
when three or more alternatives are present. At this stage of the proof we 
pay a special attention to completely agreed profiles, i.e., those profiles in 
which all linear orders coincide. There, we first prove our theorem for the 
case that at least two alternatives are missing from the set of alternatives 
that can be elected at completely agreed profiles (Proposition [7]). Two short 
Propositions |8] and HI prepair us for the final thrust in the proof by induction 
dealing with two particular cases of Theorem [21 Then, in a series of six short 
claims, we complete the proof of Theorem [2J Section E] finishes with a proof 
of Theorem [3j 

We now need the following definition. Let F be a social choice rule, R 
a profile, L a preference order over the alternatives, and V the entire set of 
voters having some particular preference order at R, common for all of them 
and different from L. Then a subset V\ C V will be classified as L-inferior if 

F(R_ V (L)) >-v F{R. Vl {L)). 

In other words, V\ is L-inferior if voters from V will be strictly better off if 
all of them switch to voting L rather than only voters from V\ do this. 

Proposition 1. Let F be a social choice rule. Fix a profile R and a pref- 
erence order L, both over the set of alternatives A. Suppose V is the entire 
set of voters who at R have some preference order other than L. IfV has an 
L-inferior subset then F is safely manipulable. 

Proof. Let V\ be a maximal element of the set of L-inferior subsets of V 
partially ordered by inclusion. We claim that were i?_vi(L) the profile of 
sincere preferences then it would be safely manipulable by the voters in V — 
V\. At the profile LLy^L), the voters in V — V\ are the sole voters present 
with their particular preferences. If ^ C V — V\, then V\ U Vi is not 
L-inferior (as V% was maximal with this property) and one has 

F(R- Vl (L)- V2 (L)) = F(R- (VlUV2) (L)) h v F{R_ V {L)) y v F(R_ Vl (L)). 

This implies voters in V — V\, at i?_vi(L), have incentive to strategically vote 
L and can do it safely. □ 
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Proposition 2. Let F be a social choice rule. Suppose that, at a profile R, 
voter i has an incentive to strategically vote L ^ Ri. Let V be the entire set 
of voters with preferences identical to voter i at R. If F(R_v{L)) F(R) 
then F is safely manipulable. 

Proof. If R is not safely manipulable, there exists a nonempty subset V\ C 
V such that F(R) y v F(R_ Vl (L)). We have F(R_ V (L)) hv F(R) y v 
F(R-Vl(L)). So V\ is an L-inferior subset of V, and by Proposition (TJ F is 
safely manipulable. □ 

The following proposition will be of great help each time we need to show 
some social choice rule is safely manipulable; it allows not to consider cases 
of undershooting. 

Proposition 3. Let F be a social choice rule. Suppose that at the profile R 
voter i has an incentive to cast the strategic vote L and it is unsafe. Then 
either F is safely manipulable or at some profile a voter can strategically 
overshoot. 

Proof. Let V — {j | Rj = Ri}. Let V\ C V be any subset such that i e V\ 
and F(R-Vi(L)) >-y F(R). Such subset exists since i has incentive to vote 
strategically. Partially order the subsets of V\ by inclusion. Let us consider 
the set of subsets U C V\ such that F(R) >zy F(R_u(L)). Such set is 
nonempty since the empty set belongs to it. Let V2 be a maximal subset in 
this set. The subset V 2 , then must be a proper subset of v\. So we can find 
j e V\ — V 2 , and for this voter, 

F((R„ V2 (L))_ {j} (L)) = F(R. V2U{J} (L)) y v F(R). 

Now either voting L is safe for j at i?_y 2 (L) or it is unsafe; if the latter it 
must be because, at i?_y 2 (L), voter j could strategically overshoot. □ 

We will call a social choice rule F antagonistic if there exists a profile at 
which every voter ranks a particular alternative lei last, yet the value of 
F at that profile is precisely X. 

Proposition 4. A non-constant antagonistic social choice rule F is safely 
manipulable. 
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Proof. Let R be the profile at which A (without loss of generality) is last in 
every order Ri but F(R) = A. The rule F is not constant, so let Q be a 
profile such that F(Q) ^ A. Take R and for i = 1,2,..., one by one change 
Ri to Qi. Were it a profile of sincere preferences, the last profile encountered 
for which F does not take the value A will clearly be safely manipulable. □ 

The following construction, which reduces an arbitrary social choice rule 
F to a two-voter rule, will be frequently used. Let V\ and V 2 be two non- 
empty non-intersecting subsets that partition the set of voters, i.e., ViU V 2 = 
[n]. The value of the two-voter social choice rule Fy 1 y 2 at the two- voter 
profile (Ri,R 2 ) shall be the value of F when all voters in V\ report their 
preferences to be R\ and all voters in V 2 report their preferences to be R 2 . 
We now have to aggregate voters for Fy u y 2 . To distinguish them from those 
in the original full set [n] they shall be denoted V\ and V 2 . 

Proposition 5. Let F be a social choice rule. Let V\ and V 2 form a non- 
trivial partition of [n]. If Fy 1 y 2 is safely manipulable then so is F. 

Proof. If Fy u y 3 is safely manipulable there exists a linear order L and a 
two- voter profile R = (R\, R 2 ) such that, either Ri ^ R 2 and 

Fvi,v 2 {L, R 2 ) ^{Vi} F Vl y 2 (R 1 , R 2 ), (1) 

or R 1 = R 2 and 

Fvi,v 2 {L, R2) h{Vi} F Vl y 2 (Ri, R 2 ), F Vl y 2 (L,L) h{Vi} F Vl y 2 (R 1 , R 2 ) (2) 

with one of the two relations in fl2]) being strict. Thus, at the two- voter 
profile R, voter V\ can safely strategically vote L. Let Q be the n-voter 
profile for which Q v = Ri when v G V\ and Q v = R 2 when v G V 2 . Without 
loss of generality suppose 1 G V\. At Q, voter 1 has an incentive to vote 
strategically; with that incentive in mind, we can finish by appealing to 
Proposition [2] using (JTJ, when R\ ^ R 2 , or (j2]), when R\ = R 2 . □ 

A profile R is completely agreed if all voters have identical preferences 
at R. When the social choice rule F is clearly fixed, C will denote the 
set of values that F takes on completely agreed profiles. A social choice 
rule is weakly unanimous if it selects every voter's favorite alternative at all 
completely agreed profiles ('weakly' because such a rule will not necessarily 
select X when all voters report they rank X first). 
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5. Proof of Theorem ^ three alternatives 

In this section we always assume that \A\ = 3. We will find it convenient 
to depict profiles over A as 6-tuples of sets: R = (Xx, X 2 , X 3 , X 4 , X 5 , X e ), 
where the six sets in the sequence are the set of voters of types ABC, ACB, 
BAC, BCA, CAB, and CBA, respectively 

Proposition 6. Let F be a social choice rule. If, at a profile R, ABC types 
can strategically overshoot by voting BAC , BCA, or CBA, then F is safely 
manipulable. 

Proof. Let R be a profile and L G {BAC, BCA, CBA] a linear order such 
that, if V is the entire set of all voters with preferences ABC at R, firstly 

F(R) = B, and F(R_ V (L)) = C 

and, secondly, 

F(R. Vl (L)) = A 

for some V\ C V. Then ABC types, at R, can overshoot by voting L. If 
L = BAC then if R_y(L) were the profile of sincere preferences, BAC voters 
could escape by voting ABC. If L equals BCA then if R_ Vl (L) were the 
profile of sincere preferences, BCA voters could escape by voting ABC. If L 
equals CBA then, similarly, if R_Vi{L) were the profile of sincere preferences, 
CBA voters could escape by voting ABC. □ 

We now prove our theorem for the two- voter-three-alternative case. 

Lemma 1. Let F be an onto and non-dictatorial social choice rule. If n = 2 
then F is safely manipulable. If n > 2 and V% and V2 form a non-trivial 
partition of [n] for which Fy 1 y 2 is onto and non- dictatorial, then F is safely 
manipulable. 

Proof. By Proposition [5] the second statement follows from the first. We 
now prove the first statement. By the Gibbard-Satterthwaite theorem, we 
can suppose (without loss of generality) voter 1 can individually manipulate 
a profile R with a vote of L ^ R\. If this manipulation is not safe then 
R\ = R2 and at R both voters have an incentive to strategically vote L. 
Assume (Proposition [3]) that the lack of safety arises from the prospect of an 
overshoot. Without any loss of generality, let R\ = R2 = ABC. Then 

B = F(ABC, ABC), A = F(L, ABC), and C = F(L,L). 
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By Proposition we only need to consider L G {AC B, CAB}. 

Case 1: L — ACB. It may be convenient to refer to the table below while 
reading the proof. Rows represent voter l's vote, columns voter 2's vote. 
Cell entries indicate the value of F at the relevant vote pairing. 



voter 2 



voter 1 





ABC 


ACB 


BAC 


ABC 


B 






ACB 


A 


C 




CAB 









If F(CAB, ACB) ^ C then voter 1 can safely manipulate from (CAB, ACB) 
to (ACB, ACB). So suppose F(CAB,ACB) = C. If F(CAB, ABC) = B 
then voter 1 can escape from (CAB, ABC) to (ACB, ABC); if F (CAB, ABC) = 
A then voter 2 can safely manipulate from (CAB, ACB) to (CAB, ABC). So 
suppose F(CAB, ABC) = C. Then F(CAB, BAC) = C, for if not, voter 2 
can escape from (CAB, ABC) to (CAB, BAC). Next consider (ACB, BAC). 
If F '(ACB, BAC) = B then voter 1 can escape from (ACB, BAC) to (CAB, BAC). 
If F (ACB, BAC) = C then voter 2 can escape from (ACB, BAC) to (ACB, ABC). 
So let F(ACB, BAC) = A. Then F(ABC, BAC) = A, otherwise voter 1 can 
safely manipulate from (ABC, BAC) to (ACB, BAC). But now voter 2 can 
safely manipulate from (ABC, BAC) to (ABC, ABC). 

Case 2: L = CAB. 



voter 1 



voter 2 





ABC 


ACB 


ABC 


B 




ACB 






CAB 


A 





If F(ACB, ABC) ^ A then voter 1 can safely manipulate (ACB, ABC) 
by voting CAB. So let F(ACB, ABC) = A. If F(CAB, ACB) ^ A then 
voter 2 can safely manipulate (CAB, ACB) by voting ABC. So assume 
F(CAB, ACB) = A. If F(ABC, ACB) ^ A then voter 1 can safely ma- 
nipulate (ABC, ACB) by voting CAB. So let F(ABC, ACB) = A. If 
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F(ACB, ACB) = A or B then a safe manipulation is possible at (ABC, ABC). 
If F(ACB, ACB) = C then voter 1 can safely manipulate from (CAB, ACB) 
to (ACB, ACB). □ 



Lemma 2. A social choice rule F that is onto but not weakly unanimous is 
safely manipulable. 

Proof. Assume F isn't antagonistic (Proposition H]). In this case there will 
be a profile S at which every voter reports ABC (say) but F(S) is B rather 
than A. If there is any completely agreed profile Q such that F(Q) = A then 
at S all voters have an incentive to vote Q\, if this strategic vote isn't safe 
then we can apply Proposition [2J So assume A j£ C. Given F is onto we can 
find a profile 

R — (X\, X2, X3, X4, X5, Xq) 
such that F(R°) = A. Let 

R 1 = R°_ X:i (ABC) = (X 1 U X 3 ,X 2 ,0,X 4 ,X 5 ,X 6 ). 

If F(R l ) = B then at R° voters of type BAC have an incentive to vote ABC, 
and this strategic vote is such that we may apply Proposition [2] to conclude 
F is safely manipulable. If F(R X ) = C then at R 1 some ABC types can 
escape by voting BAC. This leaves us with the case that F(R 1 ) = A, which 
we now assume. Consider 

R 2 = R l _ Xi (ABC) = (X 1 UI 3 U X 4 , X 2 , 0, 0, X 5 , X 6 ). 

If F(R 2 ) 7^ A then at R 1 voters of type BCA can escape by voting ABC. 
So assume F(R 2 ) = A. Let 

R 3 = R 2 ^ (ACB) = (X, UI3U X 4 , X 2 U X 5 , 0, 0, 0, X 6 ). 

If F(R 3 ) = B then at R 3 some voters of type ACB can escape by voting 
CAB. If F(R 3 ) = C then at R 2 voters of type CAB have an incentive to 
vote ABC, and this strategic vote is such that we may apply Proposition [2] 
to conclude F is safely manipulable. So assume F(R 3 ) = A, and consider 

R 4 = R 3 _ Xe (ABC) = (X 1 U X 3 U X 4 U X 6 , X 2 U X 5 , 0, 0, 0, 0) 

If F(R 4 ) 7^ A then at R 3 voters of type CBA can escape by voting ABC. 
So assume F(R 2 ) = A. 
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We are left in a situation in which Fxiux 3 uX4UX6,X2UX5 is well-defined; 
moreover, it maps (ABC, ACB) to A, {ABC, ABC) to B, and (ACB, ACB) 
to C, and so Lemma CD applies. 

□ 

Lemma 3. If F is an onto and nondictatorial social choice rule then it is 
safely manipulable. 

Proof. Throughout this proof we may assume that three or more voters are 
present. Lemma [2] allows us to assume that F is weakly unanimous. 

Due to the Gibbard-Satterthwaite theorem it suffices to show that F 
being unsafely manipulable implies F is also safely manipulable. By Propo- 
sition El and without any loss of generality, suppose that some ABC types 
may strategically overshoot at a profile R. By Proposition we may assume 
that they may overshoot voting ACB or CAB. 

Case 1: Suppose that, at R, some ABC types can strategically overshoot 
by voting ACB. Let V be the set of ABC types at R. Then F(R) = B 
and there must exist some V\ C V such that F(R_v 1 (AC B)) = A while 
F(R_ V (ACB)) = C. Let 

R 1 = R-v 1 (AC B) = (Xi, X 2 , X 3 , X 4 , X 5 , X 6 ). 

The intent now is to either directly show that F is safely manipulable or to 
demonstrate that the two- voter social choice rule generated by X\ U X2 U X3 
and X 4 U X 5 U X 6 is well-defined, onto, and nondictatorial. This will imply 
safe manipulability by Proposition |5j We know that FIR 1 ) = A, and that 
both X\ and X 2 are not empty (and therefore that X\ U X 2 U X 3 7^ 0). Let 

R 2 = R_ V {ACB) = (0, X x U X 2 , X 3 , X 4 , X s , X 6 ). 

We know F(R 2 ) = C. Next let 

R 3 = (Xx U X 2 , 0, x 3 , x 4 , x 5 , x 6 ). 

If F(R 3 ) = A or C then consider the manipulation of R 2 by some ACB types 
voting ABC; if this is unsafe we may then use Proposition [2] to deduce F is 
safely manipulable. So suppose F(R 3 ) = B. Let 

R = (Xi, X 2 , X 3 , 0, X 4 U X 5 , X 6 ), 
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If F(R 4 ) A and X 4 ^ 0, then BCA types can escape (to R 4 ) at R 1 . So 
suppose F(R 4 ) = A (if X 4 = this is immediate as then R A = R 1 ). Let us 
consider now 

R 5 = (X 1; X 2 , X 3 , 0, X 4 U X 5 U X 6) 0). 

If F{R 5 ) ^ A and X 6 ^ 0, then CBA types can escape (to R 5 ) at .R 4 . So 
suppose F(R 5 ) = A (if X 6 = this is immediate as then i? 5 = R 1 ). 
Let 

i? 6 = (X x U X 3 , X 2 , 0, 0, X 4 U X 5 U X 6 , 0). 

Suppose, for now, X3 7^ 0. If F(R G ) = B then consider the manipulation of 
R 5 by BAC types voting ABC; if this is unsafe we may then use Proposition [2] 
to deduce F is safely manipulable. If F(R 6 ) = C then some ABC types can 
escape from R 6 (to R 5 ). So suppose F(R 6 ) = A (if X 3 = this is immediate). 
Consider now 

R 7 = (Xx U X 2 U X 3 , 0, 0, 0, X 4 U X 5 U X 6 , 0). 

If X 2 = 0, then F(R 7 ) = F(R 6 ) = A^C. If X 2 ^ and F(R 7 ) = C, some 
ABC types can escape R 7 (to R 6 ). So suppose F(R 7 ) ^ C. This implies 
that in the event X 4 U X5 U Xq ^ 0, the second voter is not a dictator for 

We now show (assuming F is not safely manipulable) that X 4 UX5UX6 7^ 
0. We will then show (again assuming F is not safely manipulable) the 
first voter is not a dictator for i 7 Xiux 2 uX3,X4ux 5 uX6- Given that F is weakly 
unanimous, hence onto, we will then have enough to use Proposition [5j We 
need just three more profiles: 

R s = (0, X 1 U X 2 U X 3 , 0, X 4 , X 5 , X 6 ), 
R 9 = (0, Xi U X 2 U X 3 , 0, 0, X 5 , X 4 U X 6 ), 
R 10 = (0, X x U X 2 U X 3 , 0, 0, 0, X 4 U X 5 U X 6 ). 

If X 3 = 0, then F{R 8 ) = F(R 2 ) = C. Suppose X 3 ^ 0. If F{R S ) ^ C, 
then BAC types can escape from R 2 (to R 8 ). So assume F(R 8 ) = C. Since 
F(R 7 ) 7^ C, by the weak unanimity of F, this implies X 4 U X5 U X$ ^ 0. 

If X 4 = then F(R 9 ) = F(R 8 ) = C. Suppose X 4 0. If F(R 9 ) = A, 
then some CBA types can escape from R 9 (to R 8 ). So (regardless of whether 
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X 4 is empty or not) let F(R 9 ) ^ A. If X 5 = then F(R W ) ^ A. Suppose 
X 5 7^ 0. If F(R 10 ) = A, then some CBA types can escape from R 10 (to 
R 9 ). So let F(R 10 ) 7^ A. This implies that the first voter is not a dictator 
for Fx 1 ux 2 ux 3 ,x 4 ux 5 ux 6 - This function inherits weak unanimity from F and 
hence is onto. Then by Proposition O F is safely manipulable. 

Case 2: overshooting by voting CAB. Suppose that, at R, some ABC types 
can strategically overshoot by voting CAB. This implies F(R) = B. Let V 
be the set of ABC types at R. There must exist some V\ C V such that 
F(R-. Vl (CAB)) = A. Let 

R 1 = R_ Vl (CAB) = (X 1? X 2 , X 3 , X 4 , X 5 , X 6 ). 

The intent now is to either directly show that F is safely manipulable or to 
demonstrate that the two- voter social choice rule generated by Xi U X 2 U X 5 
and X 3 U X 4 U Xq is onto, and nondictatorial. We know FIR 1 ) = A, and 
X h X 5 ^ (and hence IiUl 2 Ul 5 ^l). Let 

i? 2 = itLy(CAS) = (0,X 2 ,X3,X4,X! UX 5 ,X 6 ). 

If F(R 2 ) = A or B then we may apply Proposition [2] to deduce F is safely 
manipulable. So suppose F(R 2 ) = C. Next let 

i? 3 = (X 1 UX 5 ,X 2 ,X 3 ,X 4 ,0,X 6 ). 

If there are no CAB types present at R then R = R 3 , and F(R 3 ) = B. 
Now suppose that there are CAB types present at R, and F(R 3 ) 7^ B\ given 
F(_R) = B, CAB types are then capable of escaping from R to R 3 . So let us 
suppose F(R 3 ) = B. Let 

R A = (X, UI 2 U X 5 , 0, X 3 , X 4 , 0, X 6 ), 
R 5 = (X x U X 2 U X 5 , 0, 0, X 4 , 0, X 3 U X 6 ), 
i? 6 = (Xi U X 2 U X 5 , 0, 0, 0, 0, X 3 U X 4 U X 6 ). 

If X 2 = 0, then F(R 4 ) = F(R 3 ) = B. Suppose X 2 ^ 0. If F(R 4 ) ^ B 
then ACB types can escape from R 3 to R 4 . So let F(R 4 ) = B. We note 
that by weak unanimity this implies X 3 U X 4 U Xq 7^ 0. If X 3 = 0, then 
F(R 5 ) = F(R A ) = B. Suppose X 3 ^ 0; if F(R 5 ) = A then some CBA types 
can escape from R 5 to R A . So, regardless of whether X 3 is empty or not, to 
proceed we let F(R 5 ) ^ A. If X 4 = 0, F(R 6 ) A. If X 4 ^ then in the 
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event F(R 6 ) = A, some CBA types can escape from R 6 to R 5 . So F(R 6 ) ^ A. 
This implies the first voter is not a dictator for Fx 1 ux2ux s ,x 3 ux i ux (i - 

It remains to show that the second voter is not a dictator for Fx 1 ux 2 ux 5 ,x 3 ux 4 ux 6 ■ 
For this purpose we will need four more profiles: 



If X 4 = 0, then F{R 7 ) = F{R l ) = A. Suppose X 4 ^ 0. If F{R 7 ) ^ A then 
BCA types can escape from R 1 to R 7 . So let F(R 7 ) = A. If X 6 = 0, then 
F(R 8 ) = F(R 7 ) = A. Suppose X 6 ^ 0. If F(R 8 ) ^ A then CBA types 
can escape from R 7 to R 8 . So let F(R 8 ) = A. If F(R 9 ) = B then some 
CAB types can escape from R 9 to R 8 . So let F(R 9 ) ^ B. If X 2 = 0, then 
F(R 10 ) = F(R 9 ) ^ B. Suppose X 2 ^ 0. If F(R 10 ) = B then some CAB 
types can escape from R w to R 9 . So let F(_R 10 ) ^ B. But then the second 
voter is not a dictator for F Xl ux 2 ux 5! x 3 ux 4 ux 6 - 

The rule F Xl ux 2 ux 5 ,x 3 ux 4 ux 6 inherits weak unanimity from F. Hence this 
rule is onto. Then by Proposition 0, F is safely manipulable. □ 

6. Proof of Theorem Et three or more alternatives 

Proposition [7] shows Theorem [2] holds when \C\ < \A\ — 1. The two 
subsequent short propositions set up a proof-by-induction of the whole thing. 

Proposition 7. Let F be an onto social choice rule. If at least two alterna- 
tives are missing from C then F is safely manipulable. 

Proof. Suppose that neither A nor B belong to C. Let L AB be a fixed but 
otherwise arbitrary linear order of the alternatives that has A first and B 
second. Let L BA be the linear order formed by taking L AB and reversing 
the spots of A and B, ceteris paribus. Let m > 2 be the minimum possible 
number of voter types present when the value of F is in the set {A, B}. Let 
S denote the set of profiles that have exactly m voter types present and are 
mapped by F to either A ot B. 

Firstly, suppose no profile in S has an L type voter present. Pick 
R G S. Let V be the entire set of voters having the preference order R x at R. 



R 7 
R 8 
R 9 



{X 1 ,X 2 ,X 3 UX i ,$,X 5 ,X 6 ), 
(X 1 ,X 2 ,X 3 UX 4 UX 6 ,0,X 5) 0), 
(0,X 2) X 3 UX 4 UX 6 ,0,X 1 UX 5 ,0), 
(0, 0, 1 3 UI 4 U X B , 0, IiUl 2 U X s , 0). 



R 



10 
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Consider the profile R_y(L AB ); F cannot map this profile to A or B because 
it has m voter types present, and one of those types is L AB . However, 

F(R) = F((RML AB ))MRi)) G {AB} 

and so, at R_y(L AB ), a voter of type L AB has an incentive to strategically 
vote R\. If such a strategic vote would be unsafe then we may apply Propo- 
sition |2] to deduce F is safely manipulable. In the event that no R G S has 
L BA type voters, the analysis proceeds similarly. 

Secondly, suppose that some profile in S has an L AB type voter present, 
another has an L BA type voter present, but no profile in S has voters of 
both types present. Let R G S have L AB types present. Since R cannot be 
completely agreed there must be an % such that R4 7^ L AB . Let V = {j\Rj = 
Ri}. Since F{R„ V {L BA )) £ {A, B} (the profile R_ V (L BA ) features both L AB 
and L BA types), the profile R_y(L BA ) is manipulable by L BA voters voting 
R%. If this manipulation is unsafe, we can apply Proposition |2j 

Thirdly and finally, suppose R G S has both L AB and L BA types present. 
Let U and W be, respectively, the set of all voters with preferences L AB 
and L BA at R. Then F(R_u(L BA )) £ {A, B} and F(R_ W (L AB )) £ {A, B} 
as both the relevant profiles have only m — 1 types present. Define a new 
relation on A as follows: >zukw if and only if >zu and >zw Without loss of 
generality we assume 

F{R_ V {L BA )) y uhW F{R_ W {L AB )). 

Now 

F(R) = F((R_ W (L AB )). W (L BA )) y ukw F(R_ W (L AB )) 

because F(R) G {A, B} and F(R_ W (L AB )) £ {A, B}. So voters in W C 
UUW can manipulate at R_w(L AB ) (by insincerely voting L BA rather than 
sincerely voting L AB ). If this manipulation is safe we are done; if not then 
notice that the manipulation is such that we may apply Proposition |5J □ 

Proposition 8. Let F be a social choice rule. IJYeC but Y is not in the 

range of F_ z for some Z ^ Y then F is safely manipulable. 

Proof. Let R be a unanimous profile at which all voters rank Y first and Z 
last, but F(R) 7^ Y. Given Y is in C, there is a completely agreed profile Q 
mapped by F to F. At R every voter i has an incentive to switch from R^ 
to Qi. If this strategic vote is unsafe, we can apply Proposition [2J □ 
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Many parts of the remainder of our proof will utilise 'subrules' derived 
from the main rule F. Given any alternative X, the subrule F_x is designed 
to pick alternatives from A — {X}, and operates as follows. Let R be an 
arbitrary profile of preferences over the set A — {X}. Let R' be the profile 
of preferences over the original set of alternatives A formed by appending an 
X to the bottom of every preference order in R. Then the value of F_x at 
R shall be the value of F at R' . Provided F is not antagonistic, F_x will 
not select X at R' and will therefore be sensibly defined. We will say F_x is 
proper if it is non-dictatorial and has image A — {X}. 

Proposition 9. Let F be a social choice rule. If there is an A £ A for which 
F^a is proper and safely manipulable then F itself is safely manipulable. 

Proof. Suppose that when the proper rule F_ A is in operation, voter i has 
an incentive to safely strategically vote L at the profile R on A — {A}. Let 
V be the set of indices j such that Rj = Then 

F-a{R-u{L)) y v F_ A (R) 

for one particular subset U C V and F-a(R-w(L)) ^iv F- A {R) for every 
subset W C V. Let R = (R\, . . . , R n ) be the profile of preferences over A 
formed by appending an A to the bottom of every preference order i?j in 
R. Let L be L with A appended to the bottom. Then V = {j \ Rj — Ri}. 
Furthermore, 

F{iLu{L)) = F_ A (R_u(L)) y v F_ A (R) = F(R) 
and for any W C V 

F(R. W (L)) = F^ A (R_ W (L)) h v F-a(R) = F(R). 
Hence voter % can safely manipulate at R with a vote of L. □ 
We can now prove Theorem [2j 

Proof. Lemma [3] provides a base case for an inductive proof. Assume \A\ > 4 
and the statement holds when the number of alternatives is |*4| — 1. Assume 
F is not anatagonistic (Proposition 0J. Assume \C\ > \A\— 1 (Proposition [7]). 
Find an alternative A as follows: if \C\ = \A\— 1, let A be the single alternative 
in A — C; if \C\ = \A\ let A be an arbitrary alternative; either way, we note, 
A — {A} C C. The rule F_ A is either dictatorial or it is not. Suppose it is not: 
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if F_a is proper then (by the induction hypothesis) Proposition M applies; if 
F_a isn't proper then there is some Y G C (Y ^ A) it cannot reach, and 
Proposition [8] applies. Suppose F_a is dictatorial: then the following chain 
of claims shows F has to be safely manipulable. □ 

Note that the alternative A has been fixed. For convenience, let voter 1 
be the dictator of F_a- 111 all of the following statements and proofs, X will 
represent an alternative different from A, and V\ and V2 will denote {1} and 
[n] — {1} respectively. Recall Proposition [5] showed that if Fy 1 y 2 is safely 
manipulable then so is F. 

Claim 1. If F_ x is non- dictatorial and can reach A then F is safely manip- 
ulable. 

Proof. If F_x is proper then Proposition [9] applies, otherwise there is some 
Y G C (Y ^ A) it cannot reach, and we can appeal to Proposition [HJ □ 

Claim 2. Either F is safely manipulable or F Vl y 2 returns X whenever voter 
1 ranks X first. 

Proof. We try to avoid concluding F is safely manipulable. 

Voter 1 dictates F-a, so Fy 1 y 2 maps (X ■ ■ ■ A, ■ ■ ■ XA) to X. If that profile 
is not safely manipulable by voter V2 then Fy 1 y 2 (X ■ ■ ■ A, ■ ■ ■ AX) G {X, A}. 

Suppose (X • • • A, ■ ■ ■ AX) is mapped to A rather than X. If voter V\ 
cannot safely manipulate that latter profile then Fy 1 y 2 {- ■ ■ AX, ■ ■ ■ AX) = A, 
and Claim [T] applies. 

So say Fy l y 2 (X ■ ■ ■ A, ■ ■ ■ AX) = X. If voter V2 has no safe manipu- 
lations, Fy 1 y 2 (X ■ ■ ■ A, L) = X for all L. And if neither does voter V\, 
F Vl y 2 (X ■ ■ •', L) = X for all L. □ 

Claim 3. Either F is safely manipulable or F returns X whenever voter 1 
ranks X first. 

Proof. If there is a profile Q such that Qi = X ■ ■ ■ but F(Q) 7^ X then (we 
show) an escape can be found. Let S be the profile at which Si = Q\ — X ■ ■ ■ , 
and for all i,j > 1 we have Si = Sj = ■ ■ ■ X. If F isn't already safely 
manipulable then by Claim |2] it must be that F(S) = X. Therefore, at 
S every voter other than voter 1 sees their least welcome outcome realised. 
Starting at S, for i — 2, 3, 4, . . . sequentially change Si to Qi (we do not imply 
n > 2 necessarily). At some stage the value of F will shift away from X; an 
escape is therefore possible under F. □ 
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Corollary 1. Either F is safely manipulable or F(R) = A implies voter 1 
is ranking A first. 

Corollary 2. Either F is safely manipulable or F always returns either the 
first or the second choice of voter 1. 

In the next two proofs we will repeatedly use Corollary [2] without explic- 
itly saying so. 

F is onto, so F(R) = A for some R. If F is not yet safely manipulable 
then (by Corollary [1]) R\ = AB ■ ■ ■ C (with B second and C last without any 
loss of generality). The objects represented by R, A, B, and C shall remain 
fixed for the remainder of these claims. 

Claim 4. Either F is safely manipulable or F_c is non-dictatorial. 

Proof. Assume no previous result shows F is safely manipulable. Voter 1 does 
not dictate F (no-one does), so there exists a profile Q for which Qi = AX ■ ■ ■ 
but F(Q) equals X rather than A. 

Let S be the profile arising when Si — Q\ — AX ■ ■ ■ and Si — Sj — ■ ■ ■ A 
for all i,j > 1. If F(S) = A then by sequentially changing Sk, k > 2, to Qk 
we can find an escape. So set F(S) = X. 

Now consider the two- voter profile (i?i, 5* 2 ) = (AB ■ ■ ■ C, ■ ■ ■ A). If F Vl y 2 
maps this profile to A then voter 1 (1 G [n]) can safely manipulate 5* with 
R 1 = AB ■ ■ ■ C. So set F Vl y 2 (AB ■ ■ ■ C, ■ ■ ■ A) = B. 

Finally, consider the profile (AB ■ ■ ■ C, ■ ■ ■ BAC). If Fy u y 2 maps this pro- 
file to A, voter can safely manipulate it with S% = ■ ■ ■ A; if the profile is 
mapped to B, F_ c has no dictator. □ 

Claim 5. Either F is safely manipulable or F-c can reach A. 

Proof. Again assume no previous result shows F is safely manipulable. Con- 
struct the profile S by setting Si = R\ — AB ■ ■ ■ C and for i, j > 2 setting 
S t = S j = --- ABC. If F(S) = A then F_ c can reach A. Suppose F(S) = B. 
For k > 2, one by one change to Rk- One of these changes must induce 
the value of F to change from B to A; this manipulation will be safe because 
F will never return C while voter l's report remains AB ■ ■ ■ C. □ 

Claim 6. We cannot avoid concluding F is safely manipulable. 

Proof. If no earlier result has directly shown F is safely manipulable then 
F^c is non-dictatorial and can reach A, and Claim [TJ applies. □ 
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We now prove Corollary [3] from Section [2J 

Proof. By Theorem [21 there exists a profile R and a voter j such that, at R, 
j has an incentive to safely strategically vote L ^ Rj. If 

F(R„ {j} (L)) F(R) 

then we are done. If not, then F(R_{j\(L)) = F(R). If F is not anonymous 
then we cannot guarantee the voter we've identified as j can be the same as 
the voter we identify as i in the statement of this corollary. Let V* be the 
set of all voters that, at R, are of type Rj and have an incentive to (safely 
or unsafely) strategically vote L. Then let V\ be a maximal element of V* 
satisfying both j E V\ and 

F(R_ V2 (L)) = F(R) 

whenever j E Vi C V\. Such a set exists because {j} meets the two criteria. 
Now V* ytz Vi for if not, at R the voter j would have no incentive to strate- 
gically vote L. So we can find i E V* — Vx, and for this voter it will be the 
case that 

F(R. VlU{l} (L)) F{R- Vl {L)) = F(R) 

and 

F(R_ VlUVa (L)) t W F(R_ Vl (L)) = F(R) 

whenever % G V3 C V* — V\. The first line above follows from the properties 
of V\, and implies % can manipulate alone at R-y x (L). The second line follows 
because j E V\ U V3 and L is a safe vote for j at R. Let V comprise of those 
voters who at R-v 1 {L) are of type Rj and have an incentive to strategically 
vote L. Necessarily, V C V*. More specifically, V C V* — Vi, because 
at i2_vi(L) the voters in Vi are reporting L. The second relation therefore 
implies L is a safe strategic vote for i at irL^L). □ 

7. Discussion 

We summarise our paper, then identify directions future research might 
take. 

We broadened the framework in which Gibbard and Satterthwaite worked 
so we could look into what can transpire when a group of like-minded vot- 
ers vote strategically and in unison (while all other voters vote sincerely). 
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The notion of an incentive to vote strategically was our starting point. We 
then distinguished between safe and unsafe strategic votes, the latter be- 
ing (primarily) those that could potentially lead to strategic overshooting 
or undershooting. After providing examples to illustrate and motivate our 
definitions, we proved our main theoretical result, then used it to extend the 
Gibbard-Satterthwaite Theorem as follows: we showed that under any onto 
and non-dictatorial social choice rule, employed to choose one of at least 
three alternatives, there can arise a situation where a voter can do strictly 
better by casting a safe strategic vote than an unstrategic one, provided all 
other voters are sincere. 

Despite being broader than that of Gibbard and Satterthwaite our frame- 
work is still rather narrow. If we extend our framework further a strategic 
vote which is safe in our framework may become unsafe. Firstly, voters of 
other types may not all be sincere. Secondly, and more importantly, voters 
of the strategic type may have several conflicting safe manipulating moves 
and again may face inability to coordinate which safe manipulating vote to 
choose. This can be illustrated by the following hypothetical example. Sup- 
pose that in a profile there are only two voters 1 and 2 with sincere preference 
ABC. Suppose that they have two safe manipulating moves L and V and 
depending on how they vote the results are shown in the following table. 



We see that if voters 1 and 2 vote sincerely, then the result is B, their sec- 
ond best alternative. However if they choose the same manipulating move- 
either both L or both L' — then the outcome is A, their most preferred al- 
ternative. If they mis-coordinate and choose different manipulating moves, 
then the outcome is C which is their least desirable alternative. Again for 
a success of manipulation coordination is necessary. One particular scenario 
in which such coordination may occur is when a particular voter (perhaps a 
public figure) is capable of sending a single message to the whole electorate 
(say through the media) calling upon his followers to vote in a certain way. It 
is reasonable to suggest that only voters who share his views might respond 
and join this loosely formed coalition. However, not all of them will respond; 



voter 2 
ABC L V 



voter 1 



ABC 
L 
V 



B B B 
B A C 
B C A 
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some of them might consider voting strategically unethical, some just will 
not get the message. Obviously, to make such a call the public figure must 
have an incentive to vote strategically and be sure that it is safe to act on 
it. Our study implies that if voters have little ability to communicate with 
each other then many incentives for voting strategically are relatively weak 
bei ng unsafe. 



Chamberlinl (119851 ) wrote that "increasingly sophisticated communica- 



tions technology" may increase the "threat" of manipulations. Nowadays we 
live in a much more interconnected world than 25 years ago with many voters 
being connected by social networks and with a few individuals (mosty celebri- 
ties) having millions of followers. Have online communication technologies 
improved the ability of strategic voters to identify and respond appropri- 
ately to incentives to vote strategically? In particular, do such technologies 
aid like-minded strategic voters attempting to coordinate? These questions 
are yet to be studied. 
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